Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

95 records in Saipan Firmware · all components

Priority MEDIUM 44

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon C…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-09-08 No fix listed CWE-120
Priority MEDIUM 44

Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2020-07-30 No fix listed CWE-120
Priority MEDIUM 44

Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00884 Published 2020-07-30 No fix listed CWE-20
Priority MEDIUM 44

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-120
Priority MEDIUM 44

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2020-07-30 No fix listed CWE-120
Priority MEDIUM 44

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01066 Published 2020-09-08 No fix listed CWE-191
Priority MEDIUM 44

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 44

Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0091 Published 2020-07-30 No fix listed CWE-416
Priority MEDIUM 44

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2020-09-08 No fix listed CWE-120
Priority MEDIUM 44

Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00915 Published 2020-06-22 No fix listed CWE-787
Priority MEDIUM 44

Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2020-06-22 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-06-22 No fix listed CWE-120
Priority MEDIUM 44

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2020-06-22 No fix listed CWE-129
Priority MEDIUM 44

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 44

Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01084 Published 2020-06-02 No fix listed CWE-190
Priority MEDIUM 44

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2020-06-02 No fix listed CWE-129
Priority MEDIUM 44

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-04-16 No fix listed CWE-787
Priority MEDIUM 44

Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voic…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-04-16 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-03-05 No fix listed CWE-120
Priority MEDIUM 44

Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-02-07 No fix listed CWE-129
Priority MEDIUM 41

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00883 Published 2020-11-02 No fix listed CWE-125
Priority MEDIUM 41

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00946 Published 2020-06-22 No fix listed CWE-125
Priority MEDIUM 41

u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01057 Published 2020-09-09 No fix listed CWE-191
Priority MEDIUM 41

Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00876 Published 2020-02-07 No fix listed CWE-125
Priority MEDIUM 41

Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indust…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00876 Published 2020-02-07 No fix listed CWE-125
Load more
Open these records in search →